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Abstract. Herman's algorithm is a synchronous randomized protocol 
for achieving self-stabilization in a token ring consisting of N processes. 
The interaction of tokens makes the dynamics of the protocol very diffi- 
cult to analyze. In this paper we study the expected time to stabilization 
in terms of the initial configuration. 

It is straightforward that the algorithm achieves stabilization almost 
surely from any initial configuration, and it is known that the worst-case 
expected time to stabilization (with respect to the initial configuration) 
is 0{N^). Our first contribution is to give an upper bound of O.G4N^ 
on the expected stabilization time, improving on previous upper bounds 
and reducing the gap with the best existing lower bound. We also intro- 
duce an asynchronous version of the protocol, showing a similar 0{N'^) 
convergence bound in this case. 

Assuming that errors arise from the corruption of some number k of bits, 
where k is fixed independently of the size of the ring, we show that the 
expected time to stabilization is 0{N). This reveals a hitherto unknown 
and highly desirable property of Herman's algorithm: it recovers quickly 
from bounded errors. We also show that if the initial configuration arises 
by resetting each bit independently and uniformly at random, then sta- 
bilization is significantly faster than in the worst case. 



1 Introduction 

Self-stabilization is a concept of fault-tolerance in distributed computing. A sys- 
tem is self-stabilizing if, starting in an arbitrary state, it reaches a correct or le- 
gitimate state and remains in a legitimate state thereafter. Thus a self-stabilizing 
system is able to recover from transient errors such as state-corrupting faults. 
The study of self-stabilizing algorithms originated in an influential paper of Di- 
jkstra [4]. By now there is a considerable body of work in the area, see [18, 
5]. ' 

In this paper we consider self-stabilization in a classical context that was 
also treated in Dijkstra's original paper — a token ring, i.e., a ring of N identical 
processes, exactly one of which is meant to hold a token at any given time. If, 
through some error, the ring enters a configuration with multiple tokens, self- 
stabilization requires that the system be guaranteed to reach a configuration with 
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only one token. In particular, we are interested in analyzing a self-stabilization 
algorithm proposed by Herman [12]. 

Herman's algorithm is a randomized procedure by which a ring of processes 
connected uni-directionally can achieve self-stabilization almost surely. The algo- 
rithm works by having each process synchronously execute the following action 
at each time step: if the process possesses a token then it passes the token to 
its clockwise neighbor with probability 1/2 and keeps the token with probabil- 
ity 1/2. If such a process decides to keep its token and if it receives a token 
from its neighbor then the two tokens are annihilated. Due to the way the al- 
gorithm is implemented we can assume that an error state always has an odd 
number of tokens, thus this process of pairwise annihilation eventually leads to 
a configuration with a single token. 

While the almost-sure termination of Herman's algorithm is straightforward, 
computing the time to termination is a challenging problem. This is characteris- 
tic of systems of interacting particles under random motion, which are ubiquitous 
in the physical and medical sciences, including statistical mechanics, neural net- 
works and epidemiology [15]. The analysis of such systems typically requires 
delicate combinatorial arguments [6]. Our case is no exception, and we heavily 
exploit work of Balding [1], which was motivated by a scenario from physical 
chemistry. 

Given some initial configuration, let T be the time until the token ring sta- 
bilizes under Herman's algorithm. We analyze the expectation of T in three 
natural cases: the worst case (over all initial configurations); the case in which 
the initial configuration is chosen uniformly at random; the case in which the 
initial configuration arises from a legitimate configuration by a bounded number 
of bit errors. In addition we introduce and analyze an asynchronous variant of 
Herman's algorithm. The latter dispenses with the successive time steps required 
in the synchronous algorithm, and instead has each process pass its token after 
an exponentially distributed time delay. 

Herman's original paper [12] showed that ET < (A^^logA^)/2 in the worst 
case (i.e., over all initial configurations with N processes). It also mentions an 
improved upper bound of 0(A^^) due to Dolev, Israeli, and Moran, without giving 
a proof or a further reference. In 2005, three papers [10, 16, 17] were published, 
largely independently, all of them giving improved O(iV^) bounds. The paper [16] 
also gives a lower bound of 4A^^/27, which is the expected stabilization time 
starting from a configuration with three equally spaced tokens. It was conjectured 
in [16] that this is the worst case among all starting configurations, including 
those with more than three tokens. This intriguing conjecture is supported by 
experimental evidence [2] . 

Our first result. Theorem 2, gives an upper bound of 0.64A^^ for the expected 
stabilization time in the synchronous version of Herman's protocol (improving 
the constant in the hitherto best bound by a third) . We also give an upper bound 
in the asynchronous case. To the best of our knowledge this is the first analysis 
of an asynchronous version of Herman's algorithm. 
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To understand the other main results of the paper requires some detail of the 
implementation of Herman's algorithm. We assume that each process has a bit 
that it can read and write, and that each process can read the bit of its counter- 
clockwise neighbor. A process's bit does not directly indicate the presence of a 
token, rather a process has a token if it has the same bit as its counterclockwise 
neighbor. Token passing is then implemented by having processes flip their bits. 

In Theorem 7 we provide an upper bound on the expected time to stabilize 
starting from the random initial configuration, that is, the configuration in which 
each process's bit is reset independently and uniformly at random. Herman's 
algorithm is such that the random configuration is obtained in one step from 
the full configuration, i.e., the configuration in which every process has a token. 
The upper bound for the random configuration is far better than the worst-case 
bound in Theorem 2; in particular, there are three-token configurations for which 
ET is provably larger than the upper bound for the random configuration. 

In Theorem 8 we show that for configurations that are obtained from a 
legitimate configuration by fiipping a constant number of process bits, we have 
ET = 0{N); i.e., the expected restabilization time is linear in N. This contrasts 
with the fact that there are configurations, even with only three tokens, that 
need i7(iV^) expected time for self-stabilization. Intuitively, our result points at 
a highly desirable — and, to the best of our knowledge, previously unknown — 
feature of Herman's protocol: it recovers quickly from bounded errors. This is 
related to the notion of a time adaptive protocol from [14], which refers to a 
protocol whose recovery time depends on the number of state-corrupted nodes 
rather than the total number of nodes. 

Full proofs are given in the appendix. 

Related Work. One parameter in the design of self-stabilizing algorithms is the 
number of states per machine. In [9], three different self-stabilizing algorithms 
with two states per machine are investigated. Only one of those algorithms works 
in a unidirectional ring, the other algorithms need more connections. The ring 
algorithm is probabilistic, but it is not symmetric: it requires an "exceptional 
machine" which executes different code. Herman's algorithm is mentioned in [9] 
as another two-state algorithm, but it is criticized by saying "it requires that all 
machines make moves synchronously which is not easily done" . In this paper, 
we suggest and analyze an asynchronous variant of Herman's algorithm, which 
is symmetric and has only two states per machine. 

The protocol of [13], also described in [2], is similar to Herman's protocol in 
that tokens are passed on a ring of processors. A scheduler selects a processor 
among those with a token; the selected processor passes the token to left or right 
neighbor, with probability 0.5, respectively. Two colliding tokens are merged to 
a single token. Our analysis of the asynchronous version of Herman's protocol 
could possibly be adapted to this protocol, by assuming that a processor passes 
its token after an exponentially distributed holding time. Of course, the fact 
that meeting tokens are merged and not annihilated would have to be taken into 
account. 
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2 Preliminaries 

We assume N processors, with N odd, organized in a ring topology. Each pro- 
cessor may or may not have a token. Herman's protocol in the traditional syn- 
chronous variant [12] works as follows: in each time step, each processor that 
has a token passes its token to its clockwise neighbor with probability r (where 
< r < 1 is a fixed parameter), and keeps it with probability 1 — r; if a processor 
keeps its token and receives another token from its counterclockwise neighbor, 
then both of those tokens are annihilated. Notice that the number of tokens 
never increases, and can decrease only by even numbers. 

Herman's protocol can be implemented as follows. Each processor possesses 
a bit, which the processor can read and write. Each processor can also read the 
bit of its counterclockwise neighbor. In this representation having the same bit 
as one's counterclockwise neighbor means having a token. In each time step, 
each processor compares its bit with the bit of its counterclockwise neighbor; 
if the bits are different, the processor keeps its bit; if the bits are equal, the 
processor flips its bit with probability r and keeps it with probability 1 — r. It 
is straightforward to verify that this procedure implements Herman's protocol: 
in particular a processor flipping its bit corresponds to passing its token to its 
clockwise neighbor.^ 

We denote the number of initial tokens by M, where 1 < i\/ < TV. The token 
representation described above enforces that M be odd. A configuration with 
only one token is called legitimate. The protocol can be viewed as a Markov chain 
with a single bottom SCC in which all states are legitimate configurations. So 
a legitimate configuration is reached with probability 1, regardless of the initial 
configuration, that is, the system self-stabilizes with probability 1. 

In this paper we also propose and analyze an asynchronous variant of Her- 
man's protocol which works similarly to the synchronous version. The asyn- 
chronous variant gives rise to a continuous-time Markov process. Each processor 
with a token passes the token to its clockwise neighbor with rate A, i.e., a proces- 
sor keeps its token for a time that is distributed exponentially with parameter A, 
before passing the token to its clockwise neighbor (i.e., hipping its bit). The 
advantage of this variant is that it does not require processor synchronization. 
Note that a processor can approximate an exponential distribution by a geomet- 
ric distribution, that is, it can execute a loop which it leaves with a small fixed 
probability at each iteration. A more precise approximation can be obtained us- 
ing a random number generator and precise clocks. For our performance analyses 
we assume an exact exponential distribution. 

Let T denote the time until only one token is left, i.e., until self-stabilization 
has occurred. In this paper we analyze the random variable T, focusing mainly 

* Notice that flipping all bits in a given configuration keeps all tokens in place. In fact, 
in the original formulation [12], in each iteration each bit is effectively flipped once 
more, so that flipping the bit means keeping the token, and keeping the bit means 
passing the token. The two formulations are equivalent in the synchronous version, 
but our formulation allows for an asynchronous version. 



4 



on its expectation ET. Many of our results hold for both the synchronous and 
the asynchronous protocol version. 

To aid our analysis we think of the processors as numbered from 1 to N, 
clockwise, according to their position in the ring. We write m := {M — l)/2. 
Let z : {1, . . . , A/} {l,...,N} be such that z(l) < • • • < z{M) and for aU 
i € {1, . . . , M}, the processor z{i) initially has a token; in other words, z{i) is 
the position of the i-th token. We often write Zuv for z{v) — z{u). 



3 Bounds on ET for Arbitrary Configurations 

The following proposition gives a precise formula for ET in both the synchronous 
and asynchronous protocols in case the number of tokens is AI = 3. 

Proposition 1 (cf. [16]). Let N denote the number of processors and let a, b, c 

denote the distances between neighboring tokens, so that a + b + c = N . For the 
synchronous protocol with parameter r let D = r(l — r), and for the asynchronous 
protocol with parameter X let D ~ \. Then the expected time to stabilization is 

abc 

ET 
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Proposition 1 is shown in [16] for the synchronous case with r ~ ^. Essentially 
the same proof works for < r < 1, and also in the asynchronous case. 

We call a configuration with M = 3 equally spaced tokens an equilateral con- 
figuration. If N is an odd multiple of 3 then a = b — c — N /i for the equilateral 
configuration. If N is not a multiple of 3 then we ask that a, 6, c equal either 
[iV/3j or [iV/3] . By Proposition 1 the expected stabilization time for a equilat- 
eral configuration is ET = . It follows that for configurations with M = 3 the 
worst case is ET = fi{N'^) and this case arises for the equilateral configuration. 
In fact it has been conjectured in [16] that, for all N , the equilateral configu- 
ration is the worst case, not only among the configurations with M = 3, but 
among all configurations. This conjecture is supported by experiments carried 
out using the probabilistic model checker PRISM — see [2] . 

Finding upper bounds on ET in the synchronous case goes back to Herman's 
original work [12]. He does not analyze ET in the journal version, but in his 
technical report [12], where he proves ET < A^^ [log A^] /2. He also mentions 
an improvement to 0{N^) due to Dolev, Israeli, and Moran, without giving a 
proof or a further reference. In 2005, three papers [10, 16, 17] were published, 
largely independently, all of them giving improved 0{N^) bounds. In [10] path- 
coupling methods are applied to self-stabilizing protocols, which lead in the case 
of Herman's protocol to the bound ET < 2N'^ for the case r = ^. Independently, 
the authors of [16] claimed 0{N'^). Their proof is elementary and also shows 
ET < 2N'^ for the case r = ^. Finally, the author of [17] (being aware of the 
conference version of [10]) applied the theory of coalescing random walks to 

Herman's protocol to obtain ET < — 1 j • T^^r^yi which is about 0.93A^^ for 



the case J' = 5- By combining results from [17] and [16], we further improve the 
constant in this bound (by about 32%), and at the same time generahze it to 
the asynchronous protocol. 



Theorem 2. For the synchronous protocol with parameter r let D ^ r(l — r), 
and for the asynchronous protocol with parameter X let D ~ X. Then, for all N 
and for all initial configurations, we have 



4 Expressions for ET 

Our analysis of Herman's protocol exploits the work of Balding [1] on annihi- 
lating particle systems. Such systems are a special case of interacting particle 
systems, which model finitely or infinitely many particles, which, in the absence 
of interaction, would be modeled as independent Markov chains. Due to particle 
interaction, the evolution of a single particle is no longer Markovian. Interacting 
particle systems have applications in many fields, including statistical mechan- 
ics, neural networks, tumor growth and spread of infections, see [15]. Balding's 
paper [1] is motivated by a scenario from physical chemistry, where particles can 
be viewed as vanishing on contact, because once two particles have met, they 
react and are no longer available for reactions afterwards. We refer the reader to 
[11] and the references therein for more information on such chemical reaction 
systems. 

We transfer results from [1] to Herman's protocol. The setup is slightly differ- 
ent because, unlike chemical particles, the tokens in Herman's protocol move only 
in one direction. This difference is inconsequential, as the state of a system can be 
captured using only relative token (or particle) distances. Care must be taken 
though, because Balding does not consider "synchronous" particle movement 
(this would make no sense in chemistry), but particles moving "asynchronously" 
or continuously in a Brownian motion. 

Given two tokens u and v with 1 < u < i; < M, we define a random vari- 
able T„„ and events A(^uv)i and ^(ui,)-t- in terms of a system in which collisions 
between tokens u and v cause u and v to be annihilated, but the movement of 
the other tokens and their possible collisions are ignored. In that system, T^v 
denotes the time until u and v have collided. Further, let and de- 

note the events that tokens u and v eventually collide down and up, respectively. 
By colliding down (resp. up) we mean that, upon colliding, the token u (resp. v) 
has caught up with v (resp. u) in clockwise direction; more formally, ii du,dv > 
denote the distances travelled in clockwise direction by the tokens until collision, 
then the collision is said to be down (resp. up) if z{u) + du = z{v) + d{v) (resp. 
z{u) + du + N — z{v) + dv). The behavior of two such tokens is equivalent to 




Hence, ET < OMN'^ 



in the synchronous case with r — ^. 
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that of a one-dimensional random walk on {0, . . . , N}, started at z„u, with ab- 
sorbing barriers at and N: the position in the random walk corresponds to the 
distance between the tokens, and colliding down (resp. up) corresponds to being 
absorbed at (resp. N). By this equivalence we have V (v4(„„)^) = 1 — Zuv/N 
and V (^(m,)t) = ^nv/N (see, e.g., [8]). 

Proposition 3 below allows to express the distribution of T in terms of 
the distribution of Tuv, conditioned under and respectively. 

Those distributions are well-known [8,3]. For the statement we need to de- 
fine the set Wm of all pairings. A pairing is a set w = {(Mi,fi), . . . , (wm,i'm)} 
with 1 < Ui < Vi < M ior all i, such that there is u'o € {1,...,M} with 
{ui,vi, . . . ,Um,Vm,wo} = {l,...,Af}. Define s{w) = 1 if the permutation 
{uivi ■ ■ ■ UmVmWo) is cven, and s{w) = —1 otherwise. (This is well-defined: it 
is easy to see that s{w) does not depend on the order of the (m^, «,;).) We have 
the following proposition: 

Proposition 3 (of. [1, Theorem 2.1]). Let M > 3. For all t > 0; 

v{T<t)^ J2 s{w) Y[ {V (T„„ < t n - V (t„, < t n . 

w£Wm {u,v)£w 

Balding's Theorem 2.1 in [1] is more general in that it gives a generating function 
for the number of remaining tokens at time t. Strictly speaking, Balding's theo- 
rem is not applicable to the synchronous version of Herman's protocol, because 
he only considers tokens that move according to the asynchronous version (in 
our terms) , and tokens in a Brownian motion. In addition, his proof omits many 
details, so we give a self-contained proof for Proposition 3 in the appendix. 

Theorem 4 below yields an expression for ET. We define the set Wm of all 
directed pairings as the set of all sets lit — {{ui,vi, di), . . . , {um, Vm, dm)} such 
that {{ui, ui), . . . , {ujn, Vm)} G Wm and di e {I, f} for alH G {1, . . . , m}. For a 
directed pairing 1^ = {{ui,vi, di), . . . , (u„i, Wm, dm)} we define 

^(^) ~ s{{iu,,V,), (Um, Vm)}) ' (- 1) ' 1^'^^™' '^■=^}l 

and the event := f]™! A(^uiv,)d, - Notice that V (A^) = lYiLiV {A(^u,vi)di) ■ 
Further, we set Tj^ := max{T„.^. ) 1 < i < m}. We have the following theorem: 

Theorem 4. For AI >3: 

ET= ^ ^(^).E[T^ I A^].p(A^) . 

A Finite Expression for ET. In the rest of the section we focus on the syn- 
chronous protocol. We obtain a closed formula for ET in Proposition 5 below. 

For 1 < u < V < M, we define z^vi ■= Zuv and z^v^f := N — z^v For 
sets 7^ "at C zit G Wm with "at — {{ui,vi,di), . . . , (uk,Vk,dk)} and 1^ = 
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. . , (wm,w,„,d„)} we write 

and 



Let 

sm(jTTy) ■ SUl(jTTu) 

gyj^y^u)-- — — - — and := l-2r(l-r) (1 - cos(j7rw)) , 

1 — cos(j7ru) 

and define, for fc G N+ and £ G N+, 
e 

Gi{yu....yi) ■■=X{{l-y^) ■ 

i=l 

We drop tfie subscripts of fI!^^ and Gf, if they are understood. Observe that 
F^^^ and G are continuous and do not depend on the order of their arguments. 
The following proposition gives, for the synchronous protocol, a concrete expres- 
sion for ET. 

Proposition 5. Consider the synchronous protocol. For M > 3; 

ET= ^ ^(^) F^''\yF{'^,^))-G{yGO^,l^)). 

An Approximation for ET. The function in Proposition 5 depends on iV, 

and also on r. This prohibits a deeper analysis as needed in Section 6. Propo- 
sition 6 gives an approximation of ET without those dependencies. To state it, 
we define, for k G N+, a function Fk : [0, 1]''' — ^ M with 

Ffc(2/i,...,2/fc) = -^ — }^ 



We drop the subscript of Fk, if it is understood. It follows from Lemma 15 in 
the appendix that the series in Fk converges. We have the following proposition. 

Proposition 6. Consider the synchronous protocol. Let 

E:^- ^ J2 ^(^) E F{yF{^,l^))-G{yG{-^,li)). 

r(l ~ r) ^-^ ^ 

Then, for each fixed M > 3 and re (^^ - i + « (0.12,0.88) and 

e>0, 

ET^E + OiN"). 
The proof of Proposition 6 is elementary but involved. 
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5 The Full Configuration 



In this section we consider the initial configuration in which every processor has 
a token, i.e., N = M. We call this configuration full. Notice that in the full 
configuration, with all bits set to 0, in the successor configuration each bit is 
independently set to 1 with probability r. Thus we study the full configuration 
in lieu of the random configuration. Wc have the following theorem: 

Theorem 7. For the synchronous protocol with parameter r let D ^ r(l — r). 
For the asynchronous protocol with parameter A > let D ~ X. For almost all 
odd N G N+, we have for the full configuration: 

ET < 0.0285A^V-D and V {T > 0.02N^/D) < 0.5 . 

Recall from Proposition 1 that, for N an odd multiple of 3, we have 
ET = 57"%- ~ 0.0370-^ if we start from the equilateral configuration. It follows 
that, for large N, the full configuration (with M = N) stabilizes faster than the 
equilateral configuration (with M = 3). This is consistent with the aforemen- 
tioned conjecture of Mclver and Morgan that the equilateral configuration with 
AI = 3 is the worst case among all configurations for a fixed N. 

6 Restabilization 

In this section we restrict attention to the synchronous version of Herman's al- 
gorithm and consider the standard bit-array implementation. Theorem 2 shows 
that the worst-case expected time to termination, considering all initial configu- 
rations, is ET = 0{N'^). We imagine that an initial configuration represents the 
state of the system immediately after an error, that is, the ring of tokens has 
become illegitimate because some of positions in the bit array were corrupted. In 
this light a natural restriction on initial configurations is to consider those that 
arise from a one-token configuration by corrupting some fixed number m of bits. 
We call these flip-m configurations. Notice that, by the token representation in 
Herman's protocol, a single bit error can lead to the creation of two neighboring 
tokens. So, m bit errors could lead to the creation of m new pairs of neighboring 
tokens. It could also happen that two bit errors affect neighboring bits, leading 
to a new pair of tokens at distance 2. To account for this, we characterize flip-m 
configuration as those with at most 2m -I- 1 tokens such that the tokens can be 
arranged into pairs, each pair at distance at most m, with one token left over. 

Fixing the number of bit errors we show that the expected time to restabi- 
lization improves to 0{N). Formally we show: 

Theorem 8. Consider the synchronous protocol. Fix any m G N+ and r € 
~ 1 "^^) ^ (0.12,0.88). Then for any flip-m configuration we have 
ET = OiN). 
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Proof. It suffices to consider flip-m configurations witli M ^ 2m + 1 tolcens. 
Witliout loss of generality, we assume that, when removing token 2m + 1, the 
token pairs (1, 2), (3, 4), . . . , (2to — 1,2m) have distances at most m; i.e., we 
assume z{u + 1) — z(u) < m for all odd u between 1 and 2m — 1. 

For each directed pairing G Wm, we define its class CI{1^) and its com- 
panion pairing H^' G Wm. For the following definition, we define u := u + 1, if u 
is odd, and u := u — 1, if u is even. 

— If {u,M,d) £ ut for some u, then Cl(l^) = 0. Its companion pairing is 
obtained, roughly speaking, by u and u switching partners. More precisely: 

• If {u,v,d') (resp. {v,u,d')) for some (v,d'), then the companion pairing 
of w is obtained by replacing (u, M, d) and (u, d, d') with (u, M, d) and 
{u,v,d') (resp. {v,u,d')). 

• Otherwise (i.e., u does not have a partner), the companion pairing of w 
is obtained by replacing (u, M, d) with (w, Af, d). 

- If ^ = {(l,2,di),(3,4,d2),...,(M - 2,M - l,rf„)} for some 
then Clijw) = m. In this case, ?zt does not have a companion pairing. 

— Otherwise, Clil^) is the greatest number i such that for all 1 < j < i — 1, 
the tokens 2j — 1 and 2j are partners (i.e., (2j — 1, 2j, d) for some d). Notice 
that < Cl{~^) < m. The companion pairing of is obtained by 2i — 1 and 
2i switching partners. 

It is easy to see that, for any G Wm with Clili) < to, we have CI{1^) = 
CI{1j^'), and the companion pairing of 1^' is lit, and = Partition 

Wm into the following sets: 

{ G Wa^i I Cl{lif) < TO and ^(i^t) = +1} and 
{z^t G V^Ou I Cl{li!) < m and ^(wt) = -1} and 
{Ht G Wa/ I a(^) = to} . 

The idea of this proof is that, in the sum of Proposition 6, the terms from 
Wm'"'''' U Wa/'"' cancel each other "almost" out, and the terms from Wa/*-'"^ 
are small. To simplify the notation in the rest of the proof, let y(lt , I(t) := 
(j/f(lz^,«t),yG(^,^)) and i?(y(lz^,^)) := Fiypil^ ,1^)) ■ Giyailt ,1^)). Since 
F and G are continuous and bounded, so is i7. 

- Let (^, lit) with 1^ C ^ e Wm'+^ U W^i'^~\ To any such (^, lit) we 
associate a companion ("at', ilt') such that H^' is the companion pairing of 1^ , 
and ~af' C H^' is obtained from 1^ in the following way: if 1^' is obtained 
from i/t by replacing one or two triples {u,v,d), then ~af' is obtained by 
performing the same replacements on "at (of course, only if {u,v,d) G 1^). 
Note that yili^ and yil^' ^li') are equal in all components, except for 
one or two components, where they differ by at most ^. Hence we have (for 
constant m) that 

y(^', ^') = i/(l^, ^) + 0(l/iV) • (1, . . . , 1) . 



I^^('"' := 
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Since H is continuous, it follows 

= ff(2/(^,^)) + 0(l/iV) . 

— Let (~af , lit) with "a? C i(t G VFm^'"-'- Note that all components of ypij^ ^ ?zt) 
arc at most ^ or at least 1 — ^. Also note that for any vector e G {0, l}'^' 
it holds H{e,ya{~^ ,^)) = 0. Since H is continuous, it follows 

iI(y(^,^)) = 0(l/7V). 

Take < e < 1. By Proposition 6 and the above considerations, we have: 

ET = 0(iV^) + - ^ ^(^) E 

r(l — r) ■^-^ 

= + • E E H{y{-^,1^)) 

+ E E 

= + ;:(Ti:7) • I E E o(V^) 



■ E E o(i/A^) 



□ 



7 Conclusions and Future Work 

We have obtained several results on the expected self-stabilization time ET in 
Herman's algorithm. We have improved the best-known upper bound for arbi- 
trary configurations, and we have given new and significantly better bounds for 
special classes of configurations: the full configuration, the random configura- 
tion, and, in particular, for configurations that arise from a fixed number of bit 
errors. For the latter class, ET reduces to 0{N), pointing to a previously un- 
known feature that Herman's algorithm recovers quickly from bounded errors. 
We have also shown that an asynchronous version of Herman's algorithm not re- 
quiring synchronization behaves similarly. For our analysis, we have transferred 
techniques that were designed for the analysis of chemical reactions. 
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The conjecture of [16], saying that the equilateral configuration with three 
tokens constitutes the worst-case, remains open. We hope to exploit our closed- 
form expression for ET to resolve this intriguing problem. While we have already 
shown that many relevant initial configurations provably converge faster, solving 
this conjecture would close the gap between the lower and upper bounds for 
stabilization time for arbitrary configurations. We would also like to investigate 
the performance of the algorithm in case the number of bit errors is not fixed, 
but is small (e.g., logarithmic) in the number of processes. 
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A Proof of Theorem 2 



Here is a restatement of Theorem 2: 

Theorem 2. For the synchronous protocol with parameter r let D = r(l — r), 
and for the asynchronous protocol with parameter A let D ~ \. Then, for all N 
and for all initial configurations, we have 

ET < . 

- V 8 27 ) D 

Hence, ET < Q.QAN^ in the synchronous case with r ~ ^. 

Proof. We build upon the proof in [17] for the synchronous case, which works as 
follows. For M > 3, let tm denote the maximal expected time for a configuration 
with M tokens to reach a configuration with fewer than M tokens, where the 
maximum is taken over all il/-tokcn configurations. It is shown that tm < ■jp' ' 
Since ET < T3 + rs + tt + • • • and + ^ + + ■ ■ ■ = \i follows 
that ET < — 1^ ' ^T- obtain the improvement by replacing the bound 

< \ with Ta < 5y • , which follows from Proposition 1 and the comments 
below the proposition. 

To generalize the result to the asynchronous case, one needs to show that 
Tm < l\?2 • also holds in the asynchronous case. Before showing how to suitably 
adapt the proof in [17], we first provide more details on the proof in [17] for the 
synchronous case. Let M > 3. For a configuration c with at most M tokens, 
define 5^[[c) as follows: if c has less than M tokens, then 5m{c) = 0; otherwise 
5m (c) is the minimal token distance in c. Let c' the successor configuration of c. 
Note that 5m{c) and 5m{c') differ by at most 1. Also note that a given token 
pair decreases its distance by 1 with probability r(l — r), because one token 
must be passed, the other one kept. Similarly, the distance is increased by 1 also 
with probability r(l — r). For the event that 5m decreases by 1, it suffices that 
the distance decreases for one token pair among those that define the minimal 
distance (Sj\/(c). For the event that 5m increases by 1, the distance must increase 
for all token pairs which define 5m{c). It follows: 

V {5m (c') = 5m (c) - 1 I c and 1 < 5m (c) < IN/M\ ) > r{l - r) 
V {5Mic) ^ 5m{c) + 1 \ c and 1<5m{c)<IN/M\- I) < r{l - r) . 

This process is compared in [17] with the following random walk on 
{0, . . . , [N/M\}, absorbing at state 0: 

ViX' = X -1\1<X <[N/]\I]) = r(l-r) 

ViX' = X + l\ l<X< [N/M\ - 1) = r(l - r) 

r {X' ^ X \ 1 < X < [N/AI\ - 1) = 1 - 2r(l - r) 

V{X' = X\X= IN/M\ ) = 1 - r(l - r) . 



13 



It is argued there that the expected time to hit in this random walk is an upper 
bound on the expected time to hit a configuration c with (5j\/(c) = 0, and hence 
also on tm- The expected time to hit in the random walk is maximized when 
starting at X = \N /M\ , in which case the expected time is L^/^-nj^^^ J + 1 ) ^ 

1 JVf, 
A/2 ■ D ■ 

This argument can be adapted to the asynchronous protocol in a straightfor- 
ward way: Arguing similarly as above, the rate in which Sm decreases by 1 is at 
least A, and the rate in which 5m increases by 1 is at most X. We compare this 
process with a continuous-time Markov chain on {0, . . . , [iV/A/J}, absorbing at 
state 0: 

— the rate in which X is decreased by 1 is A; 

— the rate in which X is increased by 1 is A if 1 < X < [iV/il/J — 1; and if 
X = [iV/A/J . 

Analogous arguments yield 

[iV/AfJ([7V/AfJ + 1) 1 
2A M^-^D ■ 

□ 

B Proof of Proposition 3 

The proof follows the one of Theorem 2.1 of [1], but is more detailed and applies 
also to the synchronous version of Herman's protocol. 
We first prove the following lemma. 

Lemma 9. Let M > 3. Denote, for 1 < u < v < M, by T_„„ the time until 
one token is left, in a system with M — 2 tokens obtained by removing the u-th 
and the v-th token. Then, for all t > 0: 

v{T<t)^^ J2 i-iy-"-^ {r {Tuv < t n - r (t„, < t n r (t_„, < t) . 

l<u<v<M 

Proof. Consider, for 1 < u < v < M, the expression 

{V (T„„ < t n A(^uv)i) - V (T„„ < t n V (T_„„ < t) 

=V {Tuv < t n J V (T_„„ <t)-V [Tuv < t n V (T_„„ < t) 



(1) 

'P (Diuvn) = 'P (T™ < t n r (t_„,„ < t) 



We wish to define events and Df^^^-^^ such that 



and 
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This can be done as follows. Call the tokens u and v red, and the other tokens 
green. Think of a system in which red and green tokens do not interact, i.e., 
red-green meetings do not cause annihilations. Meeting tokens of the same color 
are however annihilated. Then Df^^^-^^ can be defined as the event that, by time 
t, the red tokens u and v have met down, and all other tokens have annihilated, 
except for one remaining (green) token. The event D^^^^-^^ is defined similarly. 

With this definition, the expression in (1) is equal to V — V {p{uv)'\) ■ 

Now we partition the event Df^^^~^^ according to the first red-green meeting 
as follows: 

pG{ti,u} 
gG{l,...,M}\{«,t,} 

where the unions are disjoint, -D^^^^^ is the event that the first red-green meeting 
is between p and q, and is the event that no red-green meeting occurs. If 

it happens that u and v have their first meeting with a green token (say, with 
and respectively) at the same time, then we count this sample run in D^^l^^^- 
The event is partitioned similarly; in particular, if u and v have their first 

meeting with a green token (say, with f/„ and (ju, respectively) at the same time, 
then we count this sample run in D^^^^^. 

Wc show that each nonempty event D^^_^-^^ has a "companion" event with 
the same probability. 

— Consider -D"^^^^ with g < v. Its companion event is D^^^^^. In order to prove 
that those events have the same probability, we establish a bijection between 
-^^uv)i ^^'^ ^(gv)i' bijection b is defined as follows: Let w be a sample 
run (up to time t) of Let to < t he the time of the first red-green 

meeting in uj, i.e., u and g meet at tQ. Then b{uj) equals w, except that after 
time the movement of token u in 6(w) is the movement of token g in w, 
and the movement of token g in b(uj) is the movement of token u in w. By 
the reflection principle, w and b^uj) have the same probability. Furthermore, 
it is straightforward to verify that any sample run uj is in i'"^^)^ if and only 



if 6(w) e 7?^" 



Note that D'^^^-^^ and D^g.^^^ are nonempty only if w — g is odd, because all 
tokens between u and g must annihilate, so their number must be even. 

— Similarly, for g > v, the companion event of D^^_^^^ is D^^^^^. The events are 
nonempty only if m — g is even. 

— For g < u, the companion event of D^^^^-^^ is D^^^^^^. The events are nonempty 
only if V — g is even. 

— For g > u, the companion event of D^^^^^^ is -D^^^^^^. The events are nonempty 
only if w — g is odd. 

Similarly, there is a companion event to each nonempty event D^^^^^-^^- Letting 
RHS denote the right hand side of the equation in the statement of the lemma. 
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we have: 

= E (-1)""""' {V {Tuv < t n - V (T„„ < t n V (T_„„ < t) 

l<u<v<M 
l<ii<t><A/ 

1 ^ (-1)— (T'fe.J-^K 



m 

l<u<u<M 



where the last equahty is because the probabihties of the events D^^^^^ 
and >^ cancel with the probabilities of their respective companion events. 
The event D'^^^^^ is nonempty if and only if t; — m is odd; similarly, is 
nonempty if and only if — u is even. Hence, we have 



RHS 



771 

l<M<t><A/ 



where 13? > := D? s, U D? Note that D? s contains exactly those sample 
runs in which, under the normal annihilation rules, by time t, the tokens u 
and V have met and annihilated, and all other tokens except for one have also 
annihilated. 

Recall that Wm is the set of pairings. For any pairing w = 
{{ui,vi), . . . , {um,Vm)} S Wm we denotc by Ew the event that, by time t, for 
all i G {l,...,m}, the tokens Ui and Vi have met and annihilated (under the 
normal annihilation rules). Note that 

where the union is disjoint. Hence, we have: 

l<«<u<A/ 

- E E ^(^"') 

m ^ — ' ^ — ' 

l<«<u<A/ 

E ^(^») 
U 



m 

i<«<u<A/ u):(M,t))etoeWM 



w^Wm 

V 



= ■P (T < i) , 

which concludes the proof of the lemma. □ 
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Now we can prove Proposition 3 whieli is restated here. 



Proposition 3. Let M > 3. For all t > 0: 

V{T<t)^ s{w) Y[ {V [Tuv < t n A(„„)J - r {Tuv < t n . 

Proof. The proof is by induction on M = 3, 5, 7, . . .. The case Af = 3 is imme- 
diate from Lemma 9. (Notice in particular that V {T-uv < t) = 1 if M = 3.) 
For the induction step, let M >b. By Lemma 9 we have 

(T < i) = ^ (-1)""'""' {V {Tuv < t n - r {Tuv < t n r (t_„, < t) . 

l<u<v<M 

For 1 < u < w < M, we define the set W-uv similarly to the set Wm, but W-uv 
is the set of pairings on {1, ... , M} \ {u, v} rather than on {1, ... , A/}. Similarly, 
for w' € W-uv, the number s'(w') G { — 1, +1} is defined as s{w), but depending 
on the parity of the permutation of {1, . . . , M} \ {w, v}. Applying the induction 
hypothesis we have: 

r{T<t)^^ J2 i-ir-''-' {V {Tuv < t n A^uv)i) - V {Tuv < t n 

l<u<i><J\f 

(ti'ti')^) {Tu'v' < t n Ai^u'v'n)) ■ 

w'£W-uv {u',v')ew' 

We claim that for any w' £ W-uv, we have {—l)'"~"~^s'{w') = s{w U 
{{u,v)}). To see this, assume w' = {{ui,vi), . . . , {um-i,Vm-i)} and 
{ui,vi, . . . ,u„i-i,Vm-i,WQ} ~ {1,...,A/} \ {u,v}. We need to argue that 
the parities of the permutations pi = {uivi ■ ■ ■ Um-iVm-iWo) and p2 = 
{uvuiVi ■ ■ ■ Um-iVm~iWo) are equal if and only if w — u is odd. It suffices to 
argue that adding u, u at the front of pi adds an even number of inversions in 
the permutation, if and only if v — u is odd. Since u < v, the pair is not 

an inversion. For x < u, both (u, x) and (u, x) are inversions. For x > neither 
(m, x) nor {v, x) are inversions. For x G {u + 1, . . . , u — 1}, the pair (m, x) is not 
an inversion, but {v, x) is. There is an even number of such x, if and only liv — u 
is odd. This proves the claim. It follows: 



TO 

l<'U<l><J\f w:(u,v)eweWM 

■ n (T™ < i n A(uv)i) - V {Tuv < t n A^u^)^)) 
= E n < ^ n - 7^ (T„,„ < t n , 

WiiWM {u,v)£w 

which completes the induction proof. □ 
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C Proof of Theorem 4 



Theorem 4 is restated here: 

Theorem 4. Let M >3. For all t>0: 

V{T<t)^ J2 s{w) Y[ (7'(T„„<t n %„)J-7'(T„, <t n . 

w£Wm {u,v)£w 

Proof. By Proposition 3 we have: 
r {T > t) = 1 - r {T < t) 

= 1 - ^ s{w) Y[ {V (T„, < t n J - V {Tuv < t n 

= 1 - J2 ^(^) n ^ (T™ < t n 

= 1- ^ ^(Iz^) • P (T^ < t n A^) . (2) 

The Markov chain associated with Herman's protocol has a unique bottom SCC. 
Hence, P {T = oo) ^ 0. Similarly, V {T^ ^ oo) ^ for aU 1^ e W^i. By (2) it 
follows 

1= ^(^)-^(^iir) , 

and hence 

= Y ^{^)-V{Tji>t\Aj^)-V{Aji) . (3) 

For any random variable X on {0, 1, . . .}, it is known that KX — X^t^o ^ i-^ 0- 
Similarly, if X is on [0, oo), then EX = J^^ V (X > t) dt, see [8]. Hence, sum- 
ming or integrating (3) over t yields the result. □ 

D Proof of Proposition 5 

Proposition 5 is restated here. 

Proposition 5. Consider the synchronous protocol. For M > 3; 

ET- ^ ^(^) F^''\yF(J^,l^))-G{yG(J^,l^)). 
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Proof. Given e Wm and any C 1^, we define := r\(^u,v.d)€^ ^{uv)d- 
Recall that 

v (M^) = n ^ iAuv)d) = n (i-^w/iv) = G(yG(^,^)) . 

(4) 

The maxinium-niinimums identity states, for any set S of numbers, that max 5 = 
1)1"^ 1+^ min S' . Using Theorem 4 and the maximum-minimums iden- 
tity, we get 

ET= ^ ^(lir)E[T^ 

= J2 ~^i'^)E [max{T„,„ | (u, v, d) € T^} \ Aj^] V {A^) 

= J2 ^(^) E (-l)"^'+'-E[min{T„J(u,z;,d)el^}|A^]7'(A^) 

= E ^(^) E -(-l)'^'-lE[min{T„„|(^,z;,d)Gl^}|A^]7'(A^)7'(A^\^) . 

Consequently, by (4) it suffices to show 

TIT r • r-Ti 1/ J^ ^ ^1 I /I 1 -n / /I \ -'^ Y[(u,v,d)ei^ 9 {j{u,v,d), ^ 

EMT„„ I c 1?} I A^IP(A^) . ^^^^^ i:^^^^ 

(5) 

For any {u,v,d), it follows from [3] (Section 2.2, Equation (25)) that 

1 / 1 \ / 1 \ * 

V (T„. > t n A(„„),) = - X: 5 (j, ^; ^ j h [j; - j . 

For any , we therefore have 

r (min{T„„ I {u, v,d) e^}>t A-^) 

= E n 9[jiu,v,d),^;^\ \ i n h(jiu,v,dy,^\\ . 

je{l....,N-l}^ \{u,v,d}&^ ^ ^ ) \(M,ti.d)GlB' ^ ^ I 

(6) 

Summing (6) over t = 0, 1, . . . yields (5). □ 
E Proof of Proposition 6 

In this section we prove Proposition 6, which is restated here: 
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Proposition 6. Consider the synchronous protocol. Let 

r(l - r) a,J^r^, 

Then, for each fixed M > 3 and re (^i - i + « (0.12,0.88) and 

e>0, 

ET = E + OiN") . 

Proof. In the following we write j — (ji, . . . , j^) and y = (yi, . . . ,yk) for ele- 
ments of N')_ and [0, l]*^', respectively, where k E N+. Define the function 



Proposition 5 then reads as 



ET = N^- ^(^) E -(-1)'^' -GlyGC^,^)) 

je{l,...,Ar-l}l^ 

Consequently, it suffices to show that, for any fixed k E N+ and r G 
(|-¥'l + ¥)ande>0, 

jG{l,...,W-l}'= ^ ^ ^ ^ ^ ^ 



«o(j) := ITT^ ^^ _k+2 . — ^72T r-2T ^nd 



Let 

r • (1 - r) • 7r^-+2 . ji • • -jfe • (j2 + ■ ■ ■ + jl) 
s{j, y) sin(yiji7r) • • • sin(yfcjfc7r) and 

-f I . X .fk{j,y;u) 

Note that w) is independent of y. Then (7) is equivalent to 



Since |s(ji,y)| < 1 and ao(j) > 0, Equation (8) is implied by the following two 
lemmata. 
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Lemma 10. For any fixed k G N+ and f ^ [\ — 5 + "^T^) ' have 
Lemma 11. For any fixed k G N-|- and e > 0, we have 

,i:„-r.^'--»-<^?+-+^'' 

Lemmata 10 and 11 are proved in the following Subsections E.l and E.l, respec- 
tively. □ 



E.l Proof of Lemma 10 

In the following, for £ G N, let Ek{{py) denote a sum of monomials of the 
form c • ff^ ■ ■ ■ il^'' such that c G M and G {0, . . . , £} for i G {1, . . . , fc} and 
^l^ h 4 = ^. For instance, we write 3jf - >/2j?j| = E2{{PY). 

Lemma 12. The function f p. has a Taylor expansion 

lk{3\ = Ms) + a2{j)u^ + aA{j)u^ H 

with 

Ekiii^Y) f ■ no 

■ — TTa- , ■2\u+2M2 for I = 0,2,... 

More precisely, we have 

2k 

aoU) 



■il-r)-n'^+^-n---jk-{j! + ---+jD ' 
/ -. V97 1 V97 \ 

and for r G ( — ^ + 1 , coefficients of the multivariate polynomial 
in the nominator of a^lj) are negative. 

Proof. Let 'g{j',u) := y; m)/ sin(j/j7r). Notice that l/g(j;u) and h{j;u) have 
the following Taylor series: 

ciju + czj^u^ + c^jj^vP + ■ ■ ■ and 



h{j; u) = l + d2fu^ + difii^ H 

with ci = -I and d2 = — r(l — r)7r^. It follows that we have 

1 



fkir.u) 



Co + 62^^ + 64^** 
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with 

cr(-d2) 

r • (1 - r) • 7r''+2 . ■ , -i -i^ 
^" = ^fe Ji • ■•■ ■ Jfe • Ui H I^Jfe) and 

e^^3^■■■3^.■Eu{{ff^''^l^) for* = 0,2,... 

Since Cq > 0, the power series 60 + 62^^+6471 + • • • can be inverted. The inversion 
formula yields 

/fcW; = ao + a2M^ + a4U** H 

with 

1 2'= 

oo — — — — 7:; ^ ttt — '■ '■ ttt ToT and 

60 r • (1 - r) • 7r'^+2 • Ji • • • :?fc • (jf + • • • + J^) 

Qj = -flo ■ X! for i = 2, 4, . . . 

1=^,2.,. ...i-2 

It follows by an easy induction that 



Ji---.7fe-(j? + ---+j1)('+^)/2 



for i = 0, 2, . . . 



Using further values of the Taylor coefficients c;, from above, a straightforward 
but tedious computation shows that 

2'=-4p(j) 

04 - 



45 • 7r'=-2 . r • (1 - r) • ji • • • • {j{ + • • -+^1)3 ' 
where 

l<ii<fe l<ii<i2<fc 



^ (720(r(l - T)f - 240r(l - r) + 8)jt 



.4 .4 

l<ii <iii<,h 

^ (720(r(l - r)f - 300r(l - r) + 13)(j^4j^ + J^J^J^ + + 

l<ii <i2 <i3<k 

^ (1440(r(l - r))2 - 720r(l - r) + 60)j2 jf, jf, • 

l<ii <i2 <i3<iA<k 

We have determined the above coefficients of P{j) using the computer al- 
gebra system Maple. Now it is straightforward to verify that all coefficients 
of P{j) are negative, if < r • (1 — r) < j. Those inequalities hold, if 

refi-Hz 1+ Hz") □ 

The following lemma is used as an induction step in the proof of Lemma 10 
below. 
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Lemma 13. // A; G {2, 3, . . .} and u> Q, then 

hm [jk ■ /fe(ji, . . . , = -fk-iUi, ■ ■ -Jk-i^u) , 

Jk^O TT 

where the ji vary over the nonnegative reals. Consequently, with the Taylor ex- 
pansion f^.{j; u) = ak:o{j) + ak-;2{j)u'^ + a,k;4:ij)u^ + ■ ■ ■ from Lemma 12 we also 
have 

2 

lim (jfc • afc;j(ji, . . . , jfe)) = -afe-i;j(ii,...,jA;-i). 

Proof. As /i(0,ii) = 1, it suffices to show that Urn,- _,o = — • This 

follows easily from I'Hopital's rule: 



lim 



jfe sin(jfe7r'u) 



lim 



sin(jfc7rM) + jk cos(jfe7ru) • ttu 



ik^o 1 — cos(j/j7rw) jfc->o 
1 



lim 



sin(jfe7ru) • ttm 
jfe cosijkTTu) 



TTU jk^o sin(jfe7ru) 



1 



lim 



cos(jfe7ru) - jfe sin(jfc7ru) 



TTU jk^O C0s(jfe7rit) • TTU 

1 1 2 



TTW TTW TTW 



□ 



Now we can prove Lemma 10 which is restated here. 
Lemma 10. For any fixed k <E N+ and r <E (h - ^ + 



have 



E 

je{i,...,w-i}'= 



fki3,y;l/N)-aoij)\^0 



/(logiV)* 



Proof. By Lemma 12 it is equivalent to prove 

a2{j) , a4U) , 



E 

je{i,...,N-i}'' 



iV2 iV4 



o 



Ar2 



Notice that an easy induction shows that 

JV-l 



E 



1 



E-^ E 



0((logiVf). 



Hence, with Lemma 12 we have 
02 (j) 



E 

je{i,...,JV-i}'' 



7V2 



1 

iV2 



E 



je{i,...,Ar-i}' 



ii • • • .ik 



o 



iV2 
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Similarly, we also have 

04 (j) 



E 

je{i,...,N~i}'' 



iV4 



^ • 71 • • • 7fc 



- y 



je{l,...,Ar-l}'= 



0(1) _^^(logjV)fe 



Now it suffices to show that, for any fixed k G N+, 



Rk{rMN) 



f.U; 1/N) - aoij) - a2{j)/N^ a,{j)/N^ + a^{j)/N^ + 



ai{3)lN^ 



ai{j)/N^ 



is bounded over all TV e N+ and all j G {1, . . . , — !}'"', because then we also 
have that 



E 

je{i,...,jv-i}'= 



iV4 



o 



Ar2 



It follows from Lemma 12 that Rk depends only on ji/N, . . . ,jk/N; 
i.e., there is a function Rk : [0,1]*^ — > K such that Rk{ji, ■ ■ ■ ,jk'A/N) = 
Rk{ji/N, . . . ,jk/N). Therefore it suffices to take iV = 1 and to show that 



1) - aoij) - «2(j) 

04 (j) 



is bounded over all j € (0, 1]'"'. We first argue that Rkij; 1) does not have poles 
for j G (0, l]*^. This follows from the facts that (1) the function /^.(j; 1) clearly 
does not have poles there, (2) the coefficients ao{j) and 02 (j) do not have poles 
there by Lemma 12, and (3) we have a4(j) < for j G (0, 1]'^ by Lemma 12. 
Let j G [0, 1]'^' \ (0, 1]*"". By symmetry, we can assume that there is £ £ {1, . . . ,k} 
such that 7^ for I € {1, 1} and ji = for i €{€,... , k}. Denote by 

a vector (0, . . . , 0), whose dimension is clear from the context. We need to show 



that lim 



¥oRk{3'i 1) exists and is finite. We proceed by induction on k. 



For the induction base, let fc = 1. Basic computations show that 



240 



60 sin(ji7r) 



7r(l - cos(ji7r))2ji 



One can use I'Hopital's rule to find limjj^_).o 1) — 1. For the induction 

step, let fc > 2. In the following we write ak-i to make the dependence of on k 
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explicit. We have: 



lim Rk{j;l) 

j.^ 7fc(j;l)-Qfc;0(j)-afc;2(j) 

limjfc^o (jfc • (7fc(3; 1) - Qfc;o(j) - «fc;2(j))) 
fe,-jfc-i)^o limjfc^o (jfe • ak-4{j)) 

,. /fc-lO'l' • • • i:/';:-!; 1) - afe-l;o(il, • • ■ , jfe-l) - afe_i;2(jl, . . ■ , jfe-l) 

= lim : r 

Ui,...,jk-i)-^o afc_i;4(ji, . . . , jfc-ij 

(by Lemma 13) 

= lim Rk-i{ji, ■ ■ ■ ,jk-i; 1) , 
(if jfc-i)-i-o 

where the last limit exists and is finite by induction hypothesis. □ 



E.2 Proof of Lemma 11 



Lemma 14. Let ji, . . . , G N+. Let 5,e eW with S > and < e <25. Then 

1 



Proof. Define := y Ji + ■ ■ ' Jk-i- Then we need to prove that 

■E 2S-e ^ /■ -2 , 2\'5 

or, equivalently, 

jf ■ r^~^l' < fk + . 

If jk < r, then fj^ ■ r"^-^-!^ < r^l^ ■ r'^-<^/^ = < jl + r^. The case jk > r is 
similar. □ 

Lemma 15. Let 5 G and k G N+. The following series converges: 

1 



E 
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Proof. The proof is by induction on k. The assertion clearly holds for the base 
case fc = 1. For fc > 2 we have: 



E 



1 



3k 

< 



Jfe n j,_ieN+ Ji- ■■■■ Jk-i ■ Ut + ■ ■ ■ + Jfc) 

S/2 



-T+s E : 7^^ ^^57^ (Lemma 14) 

jfceN+ -^fc ji,...jfc_ieN+ Ji- ■■■■ Jk-i • Ui H ^ Jfe_i 

= E "o+i ■ '^<5/2,fe-i ' 

where C5/2,fc-i is the constant from the induction hypothesis. The series 
Ej,6N+ Jk^^^^^ clearly converges. □ 
Now we can prove Lemma 11, which is restated here. 

Lemma 11. For any fixed k G N+ and e > 0, we have 
Proof. Let 

oo ^ 

- E E 

Jk=N (ji,...jfc_i)eN: 
We have for ah e € (0,2): 



h- ■■■■jk- (ji + ••• + jfe) 

+ 



R^i^) = E -337 E 



1 ii 



2-e 



°° 1 1 

< > ^5— > -^5 ^ — (Lemma 

= X! "^3^ ■ ^e/2,fe-i (Lemma 

.00 

<Ce/2.k-i- -^r-.dx 

Jx=N-l 

- ^kMzi . (TV - l)-2+^ = 0(Ar-2+-) _ 



2-e 



□ 



26 



F Proof of Theorem 7 



Theorem 7 is restated here. 

Theorem 7. For the synchronous protocol with parameter r let D = r(l — r). 
For the asynchronous protocol with parameter A > let D = X. For almost all 
odd N G N+, we have for the full configuration: 

ET < 0.0285iVV-D and V {T > 0.02N^/D) < 0.5 . 

Proof. Recall that Proposition 3 expresses the distribution of T in terms of 
the distributions of one- dimensional random walks with absorbing barriers at 
and N. It is well-known that such random walks converge, for large N, to 
an appropriately scaled Brownian motion; see [7, Chapter XIV]. (In passing 

we remark that the approximation of F*-^' through in Proposition 6 is 

exactly the same approximation; however, there we also establish bounds on the 
rate of convergence, which are not needed here.) For the theorem it suffices to 
consider N tokens in a Brownian motion placed equidistantly on a circle of unit 
circumference, so that the variance of the relative movement of two tokens is 
2(7^ = 2D/N'^ per time unit. We use Balding's analysis [1] in the following. Let 
S{t) denote the expected number of tokens at time t. Balding [1, p. 740] gives 

2N 1 jn /_2..2,2^ 



5(i)^l + f^yitan^e-4-^^"^-^* 
^ ' 71- ^ 7 N 



We have 



S{t) := lim Sit) = 1 + 2 y g-^"'^'"'* . 

As S{t) >V{T<t)-l+ViT>t)-3 = 2ViT>t) + l,we have for all e > 
that _ 

Sit) -I 



V{T>t) < min ^1, — < min (l, (1 + £)- 



for almost all odd N. With ti := we get S£lLJ. ~ o.91 < 1. Notice that 

S{t) is decreasing. Hence we obtain 

/•oo />oo 

ET = / V{T >t) dt<ti + {l+e) e-i^"-f'^'t dt 

Jo Jti 

, e-'^'j'/^s 0.0285 
= ^^ + (^ + ^)^4^W 

where the last inequality holds for small e. The first statement of the theorem 
follows by setting = D/N"^ . The second statement follows by noting that with 

t2 ■■= Toi^ we get « 0.497 < 0.5. □ 
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